8个病毒样本

troika

自己试去吧

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\007[1].rar'
C:\Documents and Settings\morgan\My Documents\
  007[1].rar
    [0] Archive type: RAR
    --> 007[1].exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> IECONFIG[1].exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> ldasd[1].exe
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> SC0NFIG[1].exe
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> SPy[1].exe
        [DETECTION] Contains signature of the dropper DR/Delphi.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> SVCH0ST[1].exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> TIMPLATF0RM[1].exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.DQ.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> wanmeishijie[1].EXE
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年4月2日  08:05
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
      9 Files were scanned
      8 viruses and/or unwanted programs were found
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      9 Warnings
      0 Notes

小邪邪

估计咖啡是最牛的:一个都没报(目前)

troika

卡巴也只能报一个而已

The EQs

Scan performed at: 2007-4-2 23:16:55
Scanning Log
NOD32 version 2162 (20070402) NT
Command line: C:\Documents and Settings\EQ2\桌面\复件 007[1].rar
Operating memory - is OK

Date: 2.4.2007  Time: 23:16:59
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\复件 007[1].rar
C:\Documents and Settings\EQ2\桌面\复件 007[1].rar ?RAR ?ldasd[1].exe - Win32/PSW.Agent.NDO trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\复件 007[1].rar ?RAR ?SC0NFIG[1].exe - a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\复件 007[1].rar ?RAR ?SPy[1].exe - probably a variant of Win32/PSW.QQShou trojan
C:\Documents and Settings\EQ2\桌面\复件 007[1].rar ?RAR ?TIMPLATF0RM[1].exe - Win32/PSW.Agent.NDF trojan - was a part of the deleted object
Number of scanned files: 9
Number of threats found: 4
Number of files cleaned: 1
Time of completion: 23:17:00 Total scanning time: 1 sec (00:00:01)

solcroft

费尔扫描杀两个，运行的话通杀，六个样本懒得截图了...

Anycall-D908

程序:
C:\DOCUMENTS AND SETTINGS\OUYANG\桌面\007[1]\007[1].EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\NORTON.SYS
程序:
C:\DOCUMENTS AND SETTINGS\OUYANG\桌面\007[1]\IECONFIG[1].EXE
木马程序生成以下文件:
1) C:\WINDOWS\WSTTRS.EXE
木马名称:Trojan.Win32.Genetik.hb

程序:
C:\DOCUMENTS AND SETTINGS\OUYANG\LOCAL SETTINGS\TEMP\MS.EXE
木马名称:Trojan-PSW.Win32.OnLineGames.bhw

程序:
C:\DOCUMENTS AND SETTINGS\OUYANG\LOCAL SETTINGS\TEMP\WL.EXE
是木马程序!
程序:
C:\DOCUMENTS AND SETTINGS\OUYANG\桌面\007[1]\SPY[1].EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\CONNECTION WIZARD\ISIGNUP.DLL
程序:
C:\DOCUMENTS AND SETTINGS\OUYANG\桌面\007[1]\SVCH0ST[1].EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\OUYANG\LOCAL SETTINGS\TEMP\MHSO.EXE
2) C:\DOCUMENTS AND SETTINGS\OUYANG\LOCAL SETTINGS\TEMP\MHSO0.DLL
程序:
C:\DOCUMENTS AND SETTINGS\OUYANG\桌面\007[1]\TIMPLATF0RM[1].EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\OUYANG\LOCAL SETTINGS\TEMP\UPXDND.EXE
程序:
C:\DOCUMENTS AND SETTINGS\OUYANG\桌面\007[1]\WANMEISHIJIE[1].EXE
木马程序生成以下文件:
1) C:\WINDOWS\WGS3.EXE
2) C:\DOCUMENTS AND SETTINGS\OUYANG\LOCAL SETTINGS\TEMP\WGS0.DLL
3) C:\DOCUMENTS AND SETTINGS\OUYANG\LOCAL SETTINGS\TEMP\OYXVY.DLL
4) C:\DOCUMENTS AND SETTINGS\OUYANG\LOCAL SETTINGS\TEMP\KLIQ29.SYS
         嘿嘿~~微点全部都防住了,没有一个遗漏

xzthink

晕死，dr.web一个都没有查到，估计卡巴斯基也好不哪去！！！

Anycall-D908

原帖由 小邪邪 于 2007-4-2 23:10 发表
估计咖啡是最牛的:一个都没报(目前)

        晕死...那么那些规则能防的住吗?就算防住也会弹出一个又一个对话框好烦人吧?

小邪邪

呵呵，咖啡全都是默默的在后台阻挡，不弹窗口的